# US 9,520,996 B2 · Ciphering data for transmission in a network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,520,996 B2 - Document ID: US9520996B2 - Status: Granted - Kind: B2 - Application number: 14/010,395 - Filed: 2013-08-26 - Published: 2013-12-26 - Granted: 2016-12-13 - Earliest claimed: 2001-10-24 - Assignees: Nokia Technologies Oy - Applicants: Nokia Corporation - Inventors: Sinikka Sarkkinen; Kimmo Kettunen; Niina Karhuluoma; Antti-Pentti Vainio; Valtteri Niemi; Jan Kall - Web page: https://patentgrep.com/patent/US9520996B2 ## CPC - H04L 12/1859: {adapted to provide push services, e.g. data channels} - H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics} - H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/104: {Grouping of entities} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/03: Protecting confidentiality, e.g. by encryption - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04L 12/185: {with management of multicast group membership} - H04L 12/189: {in combination with wireless systems (selective distribution or broadcast in wireless communication networks H04W4/06)} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/065: {for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833)} - H04L 63/068: {using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L 2209/80: Wireless - H04L 2463/061: applying further key derivation, e.g. deriving traffic keys from a pair-wise master key - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The invention proposes a method for transmitting a message to a plurality of user entities in a network by using a multicast service, comprising the steps of encrypting a multicast message by using ciphering, and sending the encrypted multicast message to the plurality of user entities simultaneously. The invention also proposes a corresponding multicast service control device and a corresponding user entity. ## Claims ### Claim 1 A method comprising: generating an authentication key based on at least one authentication parameter in a user entity; and sending a message including the authentication key from the user entity to a network control device, wherein the user entity is authenticated at the network control device based on the authentication key, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification. ### Claim 2 (depends on 1) The method according to claim 1, wherein the authentication parameter comprises a user identification value. ### Claim 3 (depends on 2) The method according to claim 2, wherein the user identification value is the international mobile subscriber identification. ### Claim 4 (depends on 1) The method according to claim 1, wherein an allocation between the service identification and the service indication is changed dynamically. ### Claim 5 (depends on 1) The method according to claim 1, wherein an allocation between the service identification and the service indication is determined using a map. ### Claim 6 (depends on 1) The method according to claim 1, wherein the message containing the authentication key is sent to the network control device by using a channel not requiring a radio resource control connection. ### Claim 7 An apparatus comprising: at least one processor; and at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least: generate an authentication key based on at least one authentication parameter in a user entity; and send a message including the authentication key from the user entity to a network control device, wherein the user entity is authenticated at the network control device based on the authentication key, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification. ### Claim 8 (depends on 7) The apparatus according to claim 7, wherein the authentication parameter comprises a user identification value. ### Claim 9 (depends on 8) The apparatus according to claim 8, wherein the user identification value is the international mobile subscriber identification. ### Claim 10 (depends on 7) The apparatus according to claim 7, wherein an allocation between the service identification and the service indication is changed dynamically. ### Claim 11 (depends on 7) The apparatus according to claim 7, wherein an allocation between the service identification and the service indication is determined using a map. ### Claim 12 (depends on 7) The apparatus according to claim 7, wherein the message containing the authentication key is sent to the network control device by using a channel not requiring a radio resource control connection. ### Claim 13 A non-transitory computer-readable medium encoded with instructions that, when executed by at least one processor, perform at least the following: generating an authentication key based on at least one authentication parameter in a user entity; and sending a message including the authentication key from the user entity to a network control device, wherein the user entity is authenticated at the network control device based on the authentication key, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification. ### Claim 14 (depends on 13) The non-transitory computer-readable medium according to claim 13, wherein the authentication parameter comprises a user identification value. ### Claim 15 (depends on 14) The non-transitory computer-readable medium according to claim 14, wherein the user identification value is the international mobile subscriber identification. ### Claim 16 (depends on 13) The non-transitory computer-readable medium according to claim 13, wherein an allocation between the service identification and the service indication is changed dynamically. ### Claim 17 (depends on 13) The non-transitory computer-readable medium according to claim 13, wherein an allocation between the service identification and the service indication is determined using a map. ### Claim 18 (depends on 13) The non-transitory computer-readable medium according to claim 13, wherein the message containing the authentication key is sent to the network control device by using a channel not requiring a radio resource control connection. ### Claim 19 A method comprising: receiving, at a network control device, a message including an authentication key from a user entity, and authenticating the user entity based on the authentication key, wherein the authentication key is generated by the user entity based on at least one authentication parameter, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to service identification. ### Claim 20 (depends on 19) The method according to claim 19, wherein the authentication parameter comprises a user identification value. ### Claim 21 (depends on 20) The method according to claim 20, wherein the user identification value is the international mobile subscriber identification. ### Claim 22 An apparatus comprising: at least one processor; and at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least: receive, at the apparatus, a message including an authentication key from a user entity, and authenticate the user entity based on the authentication key, wherein the authentication key is based on at least one authentication parameter from the user entity, and wherein the at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification. ### Claim 23 (depends on 22) The apparatus according to claim 22, wherein the authentication parameter comprises a user identification value. ### Claim 24 (depends on 23) The apparatus according to claim 23, wherein the user identification value is the international mobile subscriber identification. ### Claim 25 A non-transitory computer-readable medium encoded with instructions that, when executed by at least one processor, perform at least the following: receiving a message including an authentication key from a user entity, and authenticating the user entity based on the authentication key, wherein the authentication key is based on at least one authentication parameter in a user entity, and wherein at least one authentication parameter includes a service identification identifying a requested service and a service indication including a value allocated to the service identification. ### Claim 26 (depends on 25) The non-transitory computer-readable medium according to claim 25, wherein the authentication parameter comprises a user identification value. ### Claim 27 (depends on 26) The non-transitory computer-readable medium according to claim 26, wherein the user identification value is the international mobile subscriber identification.